Skip to content

Commit bd61e46

Browse files
committed
Add vaultpass script for vault decryptions
This makes it so that ansible-vault grabs your vault password from your env vars, so you odn't have to enter it every time and you don't store it on dosk somewhere to be accidentally committed. What this doesn't cover is adding the pass to your env vars. This is done with export VAULT_PASS=pass, which can be included in your .envrc if you're using direnv for additional convenience
1 parent 393db1e commit bd61e46

File tree

2 files changed

+4
-0
lines changed

2 files changed

+4
-0
lines changed

.vault_pass

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
#!/bin/bash
2+
3+
echo $VAULT_PASS

ansible.cfg

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
11
[defaults]
22
callback_whitelist = profile_tasks
3+
vault_password_file = ./.vault_pass
34

45
[ssh_connection]
56
pipelining = True

0 commit comments

Comments
 (0)